Turn off TLS 1.0 and 1.1 on Shopify
Why it matters
TLS 1.0 and 1.1 are deprecated and no current browser uses them, but leaving them on lets attackers and old tools negotiate weaker encryption. Turning them off costs almost nothing today.
Staged change. Do this in stages and check each one before the next, so a mistake does not break your site or your mail.
The fix
Not possible on Shopify. Shopify manages TLS for its stores and does not let merchants choose protocol versions or ciphers. If you need a different policy, contact Shopify Support.
Related
- Reported by the TLS protocol versions check
- Enable TLS 1.2 and TLS 1.3
- Enable TLS 1.3
Scan your domain to see whether this applies to you.